Solr image uses configs directly from the contrib module which may lead to security issues

[AlexSkrypnyk]

lagoon/.docker/Dockerfile.solr

Line 11 in 99bfd5b

COPY --from=cli /app/web/modules/contrib/search_api_solr/jump-start/solr8/config-set/ /opt/solr/server/solr/configsets/drupal/conf

Using configs directly creates a supply chain poisoning possibility: if the search_api_solr module maintainer's account is compromised, the malicious user can add malicious configs that would be "blindly" added to the image and deployed, which can potentially wipe the Solr index.

The solution is to copy the configurations from the jump-start into a configs/solr directory manually on every new version of search_api_solr module.